cambis/silverstripe-rector
The package is clearly documented and has a matching source tree, with a permissive MIT license and no install scripts. Its single active contributor and unpinned workflow actions leave some maintenance and build-hygiene risk.
78%
Total Score
75
100
67
Health Score Breakdown
All two recent commits came from one contributor, so maintenance depends heavily on a single person and has limited visible redundancy.
The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it does not by itself show abandonment.
All 16 analyzed action references are unpinned, creating avoidable build reproducibility risk. The audit also reported a low-confidence cache-poisoning pattern; because it is low confidence, that finding is hygiene rather than a severe risk, while the single top-level write workflow adds mild permission concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Cameron Bryers |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 rector/rector Version ^2.1.7 | — | — |
cambis/silverstan Version ^2.1.7 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.